The Five-Point Vetting Checklist (Do This Before Every New Guard’s First Shift)

PSIRA registration cards can be faked, expired, or belong to someone else entirely. Estate trustees and facility managers who verify guard credentials before shifts start avoid liability, non-compliant contractors, and the nightmare scenario of discovering your “accredited guard” was never registered. This checklist walks through document verification, training confirmation, and red flags that reveal problematic hires before they become expensive problems.

Summary

• PSIRA cards are not self-verifying – A laminated card with a photo proves nothing without checking the registration number against PSIRA’s public database and confirming the person matches.
• Vetting happens before the guard’s first shift – Not three weeks later when you’re reviewing incident reports and realize documentation was never checked properly.
• Trustees and FMs own the verification process – Even when using reputable guarding companies, you’re responsible for who’s on your property. Outsourcing the contract doesn’t outsource the liability.
• Five core checks catch most problems – PSIRA registration validity, ID document match, grade appropriateness, training certificate currency, and employment verification with the guarding company.
• Red flags are often obvious – Faded photos that don’t match the person, registration numbers that don’t exist in PSIRA’s system, guards who can’t produce ID documents, and evasive answers about previous employers all signal trouble.

Why Guard Vetting Feels Like Overkill (Until It Isn’t)

Let’s be honest. You hired a reputable guarding company. They sent someone in a uniform with a PSIRA card pinned to their chest. The contract says they’re accredited and compliant. Checking all that yourself feels like you don’t trust the company you just hired, right?

Here’s the uncomfortable truth: guarding companies operate under pressure. They’re managing dozens of sites, rotating shifts, covering sick leave, and filling emergency gaps when a guard doesn’t show up. In that environment, the temptation to send someone who’s “almost qualified” or “waiting for their card to be renewed” is real. Most companies resist that temptation most of the time, but not all companies, and not always.

And even with the best intentions, administrative errors happen. A guard’s registration lapses and nobody notices until PSIRA does a site inspection. Training certificates expire. ID documents get mixed up. Employment records don’t match the person standing at your gate.

When something goes wrong (a theft, an assault, a confrontation that goes legal), the first question investigators ask is “was this person actually qualified to be here?” If the answer is no, or even “we assumed so,” your estate or company is exposed. Insurance claims get complicated. Liability shifts. And the phrase “but the guarding company was supposed to handle that” doesn’t hold up as well as you’d think.

So yes, vetting feels like you’re double-checking work someone else should have done. But the ten minutes it takes to verify a guard’s credentials is infinitely cheaper than the legal, financial, and reputational fallout when you didn’t.

This isn’t complicated. You’re not running a background investigation agency. You’re just confirming that the person standing at your gate is who they say they are, holds the credentials they claim, and is legally allowed to work as a security guard in South Africa.

1. PSIRA Registration Card: Verify It’s Real, Current, and Belongs to This Person

The PSIRA card is your starting point, but it’s not your ending point. Guards must display a valid, original PSIRA registration card at all times on duty. “I left it at home” or “it’s being renewed” is not acceptable on day one.

What to check on the card itself:

• Photo match: Does the photo on the card match the person in front of you? Not just “close enough.” Look for obvious age discrepancies, different facial features, or signs the card belonged to someone else. Faded or damaged photos that make identification difficult are a red flag.
• Registration number: Every PSIRA card has a unique registration number. Write it down.
• Expiry date: PSIRA registration must be renewed annually. Check the expiry date. If it’s expired, the guard is not legally allowed to work, full stop.
• Card condition: Original PSIRA cards are printed on specific card stock with security features. Laminated paper printouts, obviously photocopied cards, or cards that look homemade are fake. Yes, this happens.

But here’s the critical step most people skip: verifying the registration number against PSIRA’s database.

How to verify PSIRA registration online:

Go to the PSIRA website (psira.co.za) and use their verification portal. You’ll need the guard’s registration number. The system will confirm whether that number is valid, who it belongs to, what grade they’re registered as, and whether the registration is current.

This takes two minutes. If the registration number doesn’t exist in the system, or it belongs to someone else, or it’s listed as suspended or expired, you’ve just caught a massive problem before that person started working on your site.

What if the guard says “the system is down” or “PSIRA hasn’t updated it yet”? Then they don’t start their shift until you can verify. No exceptions. The risk of allowing an unregistered person to work as a guard far outweighs the inconvenience of delaying their start date.

2. ID Document Match: Confirm Identity Beyond the PSIRA Card

The PSIRA card tells you someone is registered. The ID document tells you who they actually are.

What to request:

Original South African ID book or smart ID card. Temporary IDs, photocopies, or “I forgot it” don’t cut it on day one. If your security solutions provider is sending a guard to your site, that guard should arrive with their ID document and PSIRA card both ready for inspection.

What to check:

• Name match: Does the name on the ID match the name on the PSIRA card exactly? Different surnames, missing middle names, or spelling discrepancies need explanation.
• ID photo match: Does the ID photo match the person and the PSIRA photo? Again, look for obvious mismatches.
• ID number verification: If you’re being thorough (and you should be for permanent placements), verify the ID number format is correct. South African ID numbers follow a specific structure: YYMMDD + gender code + citizenship + checksum digit. There are online validators that confirm the format is legitimate.

Why this matters:

PSIRA cards have been stolen, sold, and loaned between individuals. An ID document is harder to fake (though not impossible). Checking both together significantly reduces the chance you’re dealing with impersonation or fraudulent credentials.

3. PSIRA Grade Verification: Is This Person Qualified for the Role?

Not all PSIRA registrations are created equal. Guards are graded based on training and competence, and different roles require different grades.

PSIRA grade breakdown:

• Grade E: Entry-level, basic security awareness. Not sufficient for active guarding roles.
• Grade D: Basic guarding (access control, patrols under supervision).
• Grade C: Standard guarding (access control, patrols, incident response, reporting). This is what most estates and office parks require.
• Grade B: Supervisory roles, complex security operations.
• Grade A: Armed response, tactical security, high-risk environments.

What to verify:

Check the PSIRA card and the online verification to confirm the guard’s grade matches your site’s requirements. If your post orders require Grade C for access control and patrol duties, a Grade D or E guard is not compliant.

Common mistake:

Assuming “registered with PSIRA” means “qualified for any guarding job.” It doesn’t. A Grade E guard doing Grade C work is both non-compliant and underqualified. If something goes wrong and the guard’s grade didn’t match the role, your liability increases.

If you’re working with a professional provider for residential estate security in Pretoria or commercial properties, they should already know your grade requirements and send appropriately qualified personnel. But verify anyway.

4. Training Certificates: Confirm They’re Current and Relevant

PSIRA registration confirms a guard completed initial training, but ongoing training and specialization matter for specific site types.

What to request:

• PSIRA training certificate: Initial security training completion. This should align with their registration grade.
• Firearms competency (if applicable): If the role involves armed response or armed guarding, confirm valid firearms competency and licensed firearm declaration. Never assume this is handled.
• First aid certification (optional but valuable): Not always required, but estates and commercial sites often prefer guards with basic first aid training.
• Site-specific training records: Some guarding companies provide internal training on access control systems, incident reporting, conflict de-escalation, or customer service. Ask if such training exists and request confirmation.

What to check:

Training certificates should have issue dates and, where applicable, expiry dates. Firearms competency certificates expire and must be renewed. First aid certification typically expires after three years. If certificates are outdated, question whether the guard’s skills are current.

Red flag:

A guard who “completed training” but can’t produce any certificates, or whose training dates don’t align with their PSIRA registration timeline, warrants further questions.

5. Employment Verification: Confirm the Guard Actually Works for the Company You Hired

This sounds obvious, but hear me out. Subcontracting is rampant in the security industry. You hire Company A. Company A subcontracts to Company B. Company B sends a guard who technically works for Company C. By the time you’re three layers deep, accountability gets murky.

What to verify:

Contact the guarding company you contracted with directly (not the guard, not a supervisor you’ve never met, the actual company) and confirm:

• This guard is employed by them (or formally subcontracted with documented agreements).
• This guard is assigned to your site starting on the specified date.
• This guard’s credentials have been verified by the company according to their internal compliance procedures.

How to verify:

Phone call or email to the company’s operations manager or HR department. “We have [Guard Name] starting on [Date]. Can you confirm their employment, PSIRA registration number [####], and that they’re assigned to [Your Site]?” This takes five minutes.

Why this matters:

Rogue operators sometimes impersonate guards from legitimate companies or use credentials from previous employers they no longer work for. Verifying employment ensures the person on your site has a traceable employer relationship, which matters enormously if incidents occur and legal or insurance processes kick in.

Red Flags That Should Stop a Guard Starting Their Shift

Some warning signs are subtle. Others are glaring. Here’s what should trigger immediate follow-up before a guard begins working on your property.

Credential red flags:

• Expired PSIRA registration. Non-negotiable. If it’s expired, they don’t work until it’s renewed and verified.
• PSIRA registration number doesn’t exist in the system. Fake card. Do not proceed.
• Photo on PSIRA card doesn’t match the person. Either the card is borrowed/stolen, or the card is fake.
• ID document not available on first day. If they can’t produce ID on day one, you’re not verifying identity. That’s a problem.
• Name discrepancies between ID and PSIRA card. Small variations (e.g., middle name missing) might be administrative. Major differences are red flags.
• Training certificates are photocopies or look altered. Original certificates should be available or verifiable through the issuing body.

Behavioral red flags:

• Evasive answers about previous employers. If a guard can’t or won’t explain where they worked before, or gives vague “I worked at a few places” answers, that’s concerning.
• Can’t explain basic PSIRA procedures or responsibilities. If someone claims to be a Grade C guard but can’t describe basic incident reporting or patrol protocols, their credentials may not reflect actual competence.
• Arrives unprepared for vetting. Professional guards expect credential checks. If someone seems surprised or irritated that you’re verifying documents, that’s unusual.
• Guarding company can’t confirm employment immediately. If you call the company and they have no record of this person, or they need “a few days to check,” something’s wrong.

What to do when you spot a red flag:

Don’t ignore it hoping it resolves itself. Contact the guarding company immediately, explain the issue, and request a replacement guard with verified credentials. If the company pushes back or dismisses your concerns, that tells you something important about their compliance standards.

And document everything. If you raised a credential concern and the company sent the guard anyway, you have a paper trail showing you tried to prevent the issue.

How Often Should You Re-Verify Guard Credentials?

You’ve done the vetting. The guard has been working on your site for six months, a year, two years. Do you check their credentials again?

Yes. Here’s why:

PSIRA registration expires annually and must be renewed. Training certificates expire. Guards change employers. What was valid when they started might not be valid now.

Re-verification schedule:

• Annual PSIRA check: Once per year, re-verify every guard’s PSIRA registration status. This aligns with PSIRA’s annual renewal cycle. Add it to your calendar as a standing task every October or November (renewal deadlines cluster around year-end).
• Quarterly spot checks: Pick a few guards at random each quarter and re-verify their credentials. This keeps everyone honest and catches lapses early.
• After any incident: If a guard is involved in a security incident, conflict, or complaint, re-verify their credentials as part of your incident review. It’s basic due diligence.
• When guards rotate or are replaced: Any new guard on your site, even if they’re from the same guarding company, goes through the full vetting checklist. No shortcuts for “temporary” placements.

Who’s responsible for tracking this?

If you’re an estate trustee, this typically falls to the estate manager or security portfolio holder. If you’re a facility manager, it’s your compliance checklist. Don’t assume the guarding company will remind you when renewals are due. They might, but you own the verification responsibility.

What to Do When Credentials Don’t Check Out

You’ve run the checks. Something doesn’t match. The PSIRA number is expired, or the employment verification fails, or the guard’s story doesn’t align with the documentation. Now what?

Step 1: Don’t let the guard start their shift

If credentials are non-compliant, the person does not begin working on your property. This feels harsh, especially if they’ve traveled to your site and seem genuine, but the risk is too high. Politely explain that you need verified credentials before they can commence duty, and contact the guarding company to arrange a replacement.

Step 2: Document the issue

Write down exactly what didn’t check out: expired registration, mismatched names, missing documents, whatever it was. Include the date, time, guard’s name (as they provided it), and what action you took. This documentation protects you if questions arise later.

Step 3: Contact the guarding company immediately

Call the operations manager or HR contact and explain the problem. Frame it factually: “We’ve verified [Guard Name]’s PSIRA registration number and it shows as expired in the system. We can’t allow them to start their shift. Please send a replacement with current, verified credentials.”

Professional companies will apologize, send a replacement, and investigate internally. Unprofessional companies will make excuses, blame “system errors,” or pressure you to let the guard work anyway. How they respond tells you a lot about their compliance culture.

Step 4: Escalate if the company is unresponsive

If the guarding company repeatedly sends non-compliant guards, dismisses your verification concerns, or can’t provide replacements with proper credentials, you have a bigger problem. This is grounds for reviewing the contract and potentially switching to a provider who takes PSIRA compliance seriously.

You can also report non-compliant guarding practices to PSIRA directly. Their website has a complaints and tip-offs section. PSIRA takes unregistered guards and fraudulent credentials seriously because it undermines the entire regulatory framework.

Step 5: Review your contract

Check your guarding services agreement. It should explicitly state that all guards will be PSIRA-registered at the appropriate grade, and that the company is responsible for maintaining current credentials. If it doesn’t, that’s a gap to address in your next contract negotiation.

The Trustee or FM’s Role: You Own the Gatekeeping

Here’s the thing that makes some people uncomfortable: even though you hired a guarding company to manage security, you’re still responsible for who’s on your property. If a non-compliant guard causes an incident, “but the company said they were registered” is not a defence that holds up well legally or practically.

Think of it like hiring a contractor to renovate a building. You expect them to send qualified tradespeople, but if someone gets hurt because the electrician wasn’t licensed, the liability doesn’t magically disappear because you outsourced the work. You had a duty to verify credentials, especially if red flags were obvious.

The same principle applies to retail security in Fourways or any commercial property. You’re the gatekeeper. The guarding company provides personnel, but you decide whether those personnel are allowed on-site. That decision should be based on verified credentials, not assumptions.

This isn’t about mistrusting your security provider. It’s about creating a compliance culture where verification is routine, expected, and non-negotiable. Good guarding companies appreciate clients who take vetting seriously because it reinforces their own internal standards.

Practical Tips That Make Vetting Easier

Vetting doesn’t have to be a bureaucratic nightmare. Here’s how to streamline the process without cutting corners.

Create a vetting checklist template

A simple one-page form that lists the five verification points: PSIRA card details, ID document check, grade verification, training certificates, employment confirmation. Each guard gets a form. Once verified, the form goes into a file. This takes about ten minutes per guard and creates a permanent record.

Set up a PSIRA verification bookmark

Bookmark the PSIRA verification page on your browser. Checking registration numbers becomes a 30-second task instead of a five-minute hunt through the PSIRA website every time.

Request credentials before day one

When the guarding company confirms a new guard assignment, ask them to send you scanned copies of the guard’s PSIRA card and ID document 24–48 hours before their first shift. You can pre-verify credentials and flag issues before the guard travels to your site.

Maintain a credentials log

Keep a simple spreadsheet or logbook with each guard’s name, PSIRA registration number, grade, expiry date, and last verification date. Set calendar reminders for annual re-verification. This prevents credentials slipping through the cracks.

Make it part of site induction

When new guards arrive for their first shift, credentials verification is part of the induction process, just like showing them the patrol routes and emergency contacts. It becomes normal procedure, not a special interrogation.

Communicate expectations to the guarding company

Tell your security provider upfront: “We verify PSIRA credentials before any guard starts working on our site. Please ensure your personnel arrive with original PSIRA cards and ID documents on day one.” Professional companies expect this and will comply without pushback.

When “Just Trust the Company” Goes Wrong: Real-World Scenarios

Let’s talk about what happens when vetting is skipped or half-done. These scenarios play out more often than you’d think.

Scenario 1: The expired registration

An estate hired a guarding company. Guards worked on-site for months. During a routine PSIRA inspection, inspectors discovered two of the four guards had expired registrations. The estate was fined. The guarding company blamed administrative errors. The estate’s insurance questioned whether claims would be covered during the period guards were non-compliant. Legal bills followed.

What should have happened: Annual re-verification of all guard PSIRA registrations would have caught the expiries before PSIRA inspectors did.

Scenario 2: The borrowed card

A facility manager noticed a new guard looked nothing like the photo on his PSIRA card. When questioned, the guard admitted the card belonged to his cousin who was sick, and the guarding company had asked him to fill in “just for the day.” The facility manager refused entry and contacted the company. The company sent a replacement but downplayed the issue. The facility manager terminated the contract at renewal.

What should have happened: Basic photo match verification on day one would have caught this immediately.

Scenario 3: The ghost employee

A retail centre had guards on-site from a subcontractor. During a theft investigation, the centre tried to contact the guarding company to interview the guard who’d been on duty. The company had no record of that guard ever working for them. Turns out the supervisor had been bringing in unofficial personnel and pocketing part of their wages. The centre had no documentation, no verified credentials, and no legal recourse.

What should have happened: Employment verification via direct contact with the contracted company would have revealed the guard wasn’t officially employed.

These aren’t rare edge cases. They’re the predictable outcomes of skipping vetting procedures and assuming someone else is handling compliance.

Key Facts: PSIRA and Guard Vetting Essentials

• PSIRA registration is mandatory: Every security guard working in South Africa must be registered with PSIRA (Private Security Industry Regulatory Authority). Unregistered guards are illegal and expose property owners to liability.
• Registration must be renewed annually: PSIRA cards expire 12 months after issue. Guards must renew before expiry. An expired card means the guard cannot legally work.
• PSIRA grades matter: Grades E through A reflect training and competence. Most estates and commercial properties require Grade C minimum for access control and patrol work.
• Online verification is free: PSIRA’s website allows public verification of registration numbers. This takes two minutes and confirms validity, grade, and registration status.
• ID documents must match PSIRA cards: Name, photo, and identity details should align. Discrepancies indicate potential fraud or administrative errors requiring investigation.
• Guarding companies are responsible for maintaining compliance: Your contract should specify that all guards will be PSIRA-registered, and the company will provide proof upon request.
• You can refuse entry to non-compliant guards: If credentials don’t check out, you have every right to deny access and request a replacement. This is not unreasonable; it’s due diligence.
• Re-verification should happen annually: PSIRA renewals cluster around year-end. Schedule annual re-checks of all guards to catch expired registrations before PSIRA inspectors or incidents do.

FAQ (People Also Ask)

Q1: How do I check if a security guard is registered with PSIRA?
Visit the PSIRA website (psira.co.za) and use their online verification portal. Enter the guard’s PSIRA registration number from their card. The system will confirm whether the registration is valid, who it belongs to, what grade they hold, and whether it’s current or expired. This verification is free, public, and takes about two minutes. Always verify registration numbers before allowing guards to start working on your property, as fake or borrowed PSIRA cards do circulate in the industry.

Q2: What should I do if a guard arrives with an expired PSIRA card?
Do not allow them to start their shift. An expired PSIRA registration means the guard is legally not allowed to work as security personnel. Contact the guarding company immediately, explain the issue, and request a replacement guard with current, verified credentials. Document the incident including date, time, and the guard’s name. Professional guarding companies will apologize and send a compliant replacement. If the company pressures you to allow the expired guard to work, that’s a red flag about their compliance standards.

Q3: What’s the difference between PSIRA Grade C and Grade E guards?
Grade E is entry-level with basic security awareness training. Grade E guards are not qualified for active guarding roles like access control or patrols. Grade C is standard for most estate and commercial guarding work, covering access control, perimeter patrols, incident response, and reporting. If your site requires autonomous guarding with patrol and incident management responsibilities, you need Grade C minimum. Using under-qualified guards (wrong grade for the role) creates liability if incidents occur and the guard wasn’t properly trained for their responsibilities.

Q4: Can I verify a guard’s credentials before their first shift?
Yes, and you should. When the guarding company confirms a guard assignment, request scanned copies of the guard’s PSIRA card and ID document 24–48 hours before their start date. This allows you to pre-verify the PSIRA registration number online, check expiry dates, and confirm grade appropriateness. If issues arise, you have time to request a replacement before the guard travels to your site. Professional companies expect this and will provide documentation without pushback.

Q5: How often should I re-check guards’ PSIRA registrations?
Annual re-verification is essential because PSIRA registration expires yearly and must be renewed. Schedule a compliance check every October or November (when most renewals occur) for all guards working on your site. Additionally, conduct quarterly spot checks on a few guards at random, and always re-verify credentials after any security incident involving a guard. When guards rotate or new personnel join your site, run the full vetting checklist regardless of how long the guarding company has serviced your property.

Q6: What if the guarding company can’t confirm a guard’s employment?
If you contact the guarding company to verify employment and they have no record of the guard, or they need “a few days to check,” do not allow that person to start working. This indicates potential subcontracting layers, administrative failures, or even fraud (someone impersonating a guard from that company). Request a different guard with immediately verifiable employment, document the incident, and consider whether this raises concerns about the company’s operational standards and compliance culture.

Q7: Are training certificates required in addition to PSIRA registration?
PSIRA registration confirms basic security training, but specialized training certificates matter for specific roles. Firearms competency is legally required for armed guards and must be current. First aid certification isn’t mandatory but is valuable for estates and commercial properties. Site-specific training (access control systems, incident reporting procedures, conflict de-escalation) may be provided by guarding companies. Request proof of relevant training and verify expiry dates on time-limited certifications like firearms competency, which must be renewed regularly.

Q8: What are my legal responsibilities as a trustee or facility manager regarding guard vetting?
You’re responsible for who has access to your property, even when using a contracted guarding company. If a non-compliant or unregistered guard causes an incident, “the company was supposed to handle that” doesn’t fully shield you from liability. Basic due diligence includes verifying PSIRA registration, confirming identity, and ensuring grade-appropriate qualifications. Your service contract should specify guard compliance requirements, but you own the final gatekeeping decision. Document all credential checks to demonstrate you took reasonable steps to verify guard legitimacy and compliance.

PSIRA registration cards can be faked, expired, or borrowed. Estate trustees and facility managers must verify guard credentials before first shifts: check PSIRA registration online, match ID documents, confirm grade appropriateness, verify training certificates, and confirm employment with the contracted company. Re-verify annually because PSIRA registration expires yearly. Non-compliant guards create liability exposure regardless of who you hired. Professional guarding companies expect credential verification and provide documentation without resistance. Ten minutes of vetting prevents expensive legal, insurance, and security failures.